org.opencrx.kernel.layer.model
Class SecurityContext

java.lang.Object
  extended by org.opencrx.kernel.layer.model.SecurityContext

public class SecurityContext
extends Object

A security context manages the subjects of one subject segment.


Constructor Summary
SecurityContext(AccessControl_1 plugin, Path realmIdentity)
           
 
Method Summary
protected  Set getAllowedPrincipals(DataproviderObject_1_0 principal, DataproviderObject_1_0 user, short accessLevel)
           
protected  DataproviderObject_1_0 getGroup(DataproviderObject_1_0 principal)
          Get group principal for the given principal.
protected  DataproviderObject_1_0 getPrimaryGroup(DataproviderObject_1_0 principal)
           
protected  DataproviderObject_1_0 getPrincipal(String principalName)
           
protected  Set getSubgroups(String qualifiedPrincipalName)
          Return set of qualified names of subgroups of specified group subject.
protected  Set getSupergroups(String qualifiedPrincipalName)
          Return set of qualified names of subgroups of specified group subject.
protected  DataproviderObject_1_0 getUserHome(Path principalIdentity)
           
 
Methods inherited from class java.lang.Object
clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait
 

Constructor Detail

SecurityContext

public SecurityContext(AccessControl_1 plugin,
                       Path realmIdentity)
Method Detail

getPrincipal

protected DataproviderObject_1_0 getPrincipal(String principalName)
                                       throws ServiceException
Throws:
ServiceException

getUserHome

protected DataproviderObject_1_0 getUserHome(Path principalIdentity)
                                      throws ServiceException
Throws:
ServiceException

getPrimaryGroup

protected DataproviderObject_1_0 getPrimaryGroup(DataproviderObject_1_0 principal)
                                          throws ServiceException
Throws:
ServiceException

getGroup

protected DataproviderObject_1_0 getGroup(DataproviderObject_1_0 principal)
                                   throws ServiceException
Get group principal for the given principal. The group principal is the assigned to the same subject as the given principal and is of type PrincipalGroup. The owningGroup of a openCRX object is a PrincipalGroup.

Throws:
ServiceException

getSubgroups

protected Set getSubgroups(String qualifiedPrincipalName)
                    throws ServiceException
Return set of qualified names of subgroups of specified group subject.

Throws:
ServiceException

getSupergroups

protected Set getSupergroups(String qualifiedPrincipalName)
                      throws ServiceException
Return set of qualified names of subgroups of specified group subject.

Throws:
ServiceException

getAllowedPrincipals

protected Set getAllowedPrincipals(DataproviderObject_1_0 principal,
                                   DataproviderObject_1_0 user,
                                   short accessLevel)


This software is published under the BSD license. Copyright © 2003-2007, CRIXP AG, Switzerland, All rights reserved. Use is subject to license terms.